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Claims 

1 . A method of detecting location for a personal firewall of a client 
computer, said method comprising 

determining the current location of said personal firewall based on 
an Internet Protocol (IP) address currently used by said client computer, and 

verifying the current location determined on the basis of the current 
IP address of said client computer by carrying out a location verification pro- 
cedure with a predetermined network element. 

2. A method according to claim 1 , wherein said step of determining 

comprises 

storing in said personal firewall a list of IP addresses of a home 

network, 

comparing the current IP address of said client computer with said 
list of IP addresses, and 

if the current IP address of said client computer matches one of 
said addresses on said list, determining said personal firewall to be located in 
said home network. 

3. A method according to claim 1, wherein said step of determining 

comprises 

storing in said client computer an IP address space of a home net- 
work, 

comparing the current IP address of said client computer with said 
IP address space, and 

if the current IP address of said client computer matches said IP 
address space, determining said personal firewall to be located in said home 
network. 

4. A method according to claim 1, 2 or 3, wherein said step of veri- 
fying comprises 

checking availability of said predetermined network element related 
to the current IP address, said predetermined network element responding 
only if said personal firewall is located in the network in which it is assumed to 
be on the basis of the current IP address, 
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verifying the current location determined based on said current IP 
address if said predetermined network element responses with a specific iden- 
tity data. 

5. A method according to claim 4, wherein said specific identity data 
is a Media Access Control (MAC) address of said predetermined network ele- 
ment. 

6. A method according to claim 4, wherein said predetermined net- 
work element is a firewall in said home network. 

7. A method according to claim 1, comprising 

using said determined and verified location for selecting security 
rules for controlling said personal firewall in a location-dependent way. 

8. A method according to claim 1, comprising 

using said determined and verified location for enabling a periodical 
security rule update enquiry from said personal firewall to the central man- 
agement, when said personal firewall is in said home network, and for dis- 
abling said periodical enquiry, when said personal firewall is outside said home 
network. 

9. A method according to claim 1, comprising using said determined 
and verified location for 

sending log files to a centralized log server from said personal 
firewall when the current location of said client computer is in said home net- 
work, said log files containing information on communication transactions in 
said client computer, 

collecting log files locally at said personal firewall when the current 
location of said client computer is not in said home network, 

transferring said locally collected log files from said personal firewall 
to said centralized log server when said client computer is connected to said 
home network. 
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10. A computer terminal, comprising 

a personal firewall having a mechanism monitoring the current loca- 
tion of said personal firewall based on a Internet Protocol (IP) address cur- 
rently used by said computer terminal, and 

said personal firewall having a mechanism verifying the current lo- 
cation determined on the basis of the current IP address of said client com- 
puter by carrying out a location verification procedure with a predetermined 
network element. 

1 1 . A computer-readable medium, containing a computer software 
which, when executed in a computer device, causes the computer device to 
provide a personal firewall routine comprising 

determining the current location of said personal firewall based on 
an Internet Protocol (IP) address currently used by said client computer, and 

verifying the current location determined on the basis of the current 
IP address of said client computer by carrying out a location verification pro- 
cedure with a predetermined network element. 
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